CVE-2018-14938

CVE-2018-14938 is an integer overflow vulnerability in TCPFLOW versions up to 1.5.0-alpha, specifically within the handle_prism and handle_80211 functions in wifipcap/wifipcap.cpp. This flaw, affecting canonical and digitalcorpora distributions of TCPFLOW, can lead to an out-of-bounds read and potential access to sensitive memory or a denial of service. With a CVSS score of 9.1 (CRITICAL), it presents a high-severity risk due to its network-based attack vector, low attack complexity, and no user interaction required. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions.